Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/xsf5-FEfRIFOC4vnnaiKk6bjy4Q.roa
File: xsf5-FEfRIFOC4vnnaiKk6bjy4Q.roa (raw, json)
Hash identifier: uwFKQrwdHT845QIBxL/G+UDNK4GfJ1FWbo9bND195g4=
Subject key identifier: C6:C7:F9:F8:51:1F:44:81:4E:0B:8B:E7:9D:A8:8A:93:A6:E3:CB:84
Certificate issuer: /CN=73dfeea9c7de246e6d7d1a507406285b226f9286
Certificate serial: 01856D8AF05D4918E64EA2BB064EE10CCA99
Authority key identifier: 73:DF:EE:A9:C7:DE:24:6E:6D:7D:1A:50:74:06:28:5B:22:6F:92:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c9_uqcfeJG5tfRpQdAYoWyJvkoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/xsf5-FEfRIFOC4vnnaiKk6bjy4Q.roa
Signing time: Sun 01 Jan 2023 13:35:00 +0000
ROA not before: Sun 01 Jan 2023 13:35:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44294
IP address blocks: 185.239.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:8a:f0:5d:49:18:e6:4e:a2:bb:06:4e:e1:0c:ca:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73dfeea9c7de246e6d7d1a507406285b226f9286
Validity
Not Before: Jan 1 13:35:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c6c7f9f8511f44814e0b8be79da88a93a6e3cb84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5e:c4:e5:62:07:20:11:96:20:dc:8f:54:44:
fb:dc:2b:a4:03:a7:43:1a:24:86:63:19:6c:79:e5:
d0:e7:8b:72:ca:9d:9d:c3:ad:00:6d:43:cc:28:a6:
58:e8:d4:bd:6c:1f:a9:71:83:69:2b:9f:d0:8e:0c:
a0:4c:c7:4f:ef:01:67:de:ff:4e:23:a9:25:ad:6f:
b3:11:74:04:76:f7:35:77:26:c3:59:29:bf:c0:fe:
a4:ed:dd:4e:6c:71:7f:db:4b:85:3a:18:c8:18:f0:
f4:23:fa:c6:68:08:f0:49:76:99:72:71:46:3a:db:
be:71:c0:25:14:b0:8e:d9:ab:3e:ea:67:f3:52:46:
76:35:26:54:30:46:da:72:66:81:fe:bd:8e:60:00:
24:15:e4:d7:96:24:e6:e5:03:e7:05:9c:c0:ba:e6:
a5:78:64:07:9c:c6:82:a9:b9:7c:e4:cd:dd:13:7b:
fd:9c:ae:f9:06:52:c2:16:17:3c:b6:d3:f5:25:71:
ef:ff:11:66:89:5e:2a:9d:d5:c8:31:65:f3:cc:c7:
73:16:54:e1:5e:13:17:3c:b9:94:a0:de:21:bb:3d:
6b:02:c3:68:22:06:5b:cc:c7:88:cb:b6:fc:6c:44:
f5:df:99:a7:7b:54:bf:8c:a7:e7:29:9f:b3:ff:52:
9d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:C7:F9:F8:51:1F:44:81:4E:0B:8B:E7:9D:A8:8A:93:A6:E3:CB:84
X509v3 Authority Key Identifier:
keyid:73:DF:EE:A9:C7:DE:24:6E:6D:7D:1A:50:74:06:28:5B:22:6F:92:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9_uqcfeJG5tfRpQdAYoWyJvkoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/xsf5-FEfRIFOC4vnnaiKk6bjy4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/c9_uqcfeJG5tfRpQdAYoWyJvkoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.239.25.0/24
Signature Algorithm: sha256WithRSAEncryption
64:6f:cd:28:47:cc:3f:9c:50:e4:3c:f1:c3:97:5d:cd:a8:d0:
51:59:39:bf:2f:f0:c0:ea:35:ba:18:8c:f8:b3:c6:9a:c0:f8:
a6:80:89:9e:af:c2:b6:8b:4b:d4:be:bb:f5:2e:da:98:01:99:
0d:89:65:48:c9:3b:ea:d5:b3:aa:77:0d:37:cb:83:48:31:a5:
18:8c:89:83:23:c6:f7:f4:55:d7:ab:1d:91:66:8e:20:02:fb:
10:f3:58:9b:7b:74:3f:7f:7b:81:30:4c:73:47:45:e9:84:66:
41:e5:65:1a:58:e7:0e:41:c8:e1:c4:c2:21:8b:9a:2a:56:6f:
51:db:1a:a2:60:44:d4:ea:fd:38:c1:0e:72:bf:e5:04:25:d1:
29:aa:2a:88:89:63:de:5d:64:21:c4:c1:cd:83:a9:f5:7a:26:
5f:05:b7:f4:fc:fe:67:07:62:56:19:5d:12:c1:6f:67:c8:8b:
24:f3:9b:dd:b5:be:16:a5:81:84:c3:d9:06:26:2e:24:e2:ed:
5b:86:b7:f4:b7:f5:12:9d:fe:4e:6f:4e:7d:cc:31:6b:2f:6d:
40:86:22:76:c3:00:58:79:e4:c9:23:69:6b:dd:21:08:88:b4:
ad:2c:ce:5b:89:f3:1b:df:35:22:69:2b:7b:a9:98:00:22:43:
84:5e:b8:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:46 2024 by rpki-client on console-ams.rpki-client.org